WAF Weekly: php2shell, trust failures, AI offense, Oct 16-23
A hole in PHP itself took government sites offline, eight certificate authority keys proved trivially guessable, and an AI agent platform ran mass intrusion. The week now called Black October, grouped by mechanism.
